Hey, Windows 7 and XP Users -- You Need to Patch Now

This month's round of Microsoft Patch Tuesday security updates was just released, and there's a pretty serious flaw that affects all Microsoft operating systems earlier than Windows 8.

Windows 7 and its server-based siblings naturally get patches for this, since those operating systems are officially supported until January 2020. But this flaw is so serious that Microsoft has also issued a patch for Windows XP and its server brethren, which officially died five years ago. (Nothing for Windows Vista, though, boo hoo.)

"We are taking the unusual step of providing a security update for all customers to protect Windows platforms, including some out-of-support versions of Windows," the Microsoft Security Response Team wrote in a blog posting today.

Windows 7 users should run Windows Update to get the patch, or go here for manual downloads if that doesn't work. We're not sure if Window Update will still run on Windows XP, but if not, Microsoft has patches for XP SP3, and for 64-bit XP SP2, that you can manually download here.

MORE: Best Windows Antivirus

The vulnerability causing all the fuss is a flaw in Remote Desktop Services, which as the name implies lets you remotely control a far-off PC from a second PC. The flaw lets, well, anyone do that without authorization, and without tipping off another user of the same computer. Even worse, malware exploiting the flaw could spread from one infected computer to another on its own.

"This vulnerability is pre-authentication and requires no user interaction," the MSRC blog post says. "In other words, the vulnerability is 'wormable,' meaning that any future malware that exploits this vulnerability could propagate from vulnerable computer to vulnerable computer in a similar way as the WannaCry malware spread across the globe in 2017.

"While we have observed no exploitation of this vulnerability," the post adds, "it is highly likely that malicious actors will write an exploit for this vulnerability and incorporate it into their malware. Now that I have your attention, it is important that affected systems are patched as quickly as possible to prevent such a scenario from happening."

If you're still running Windows XP on one of your primary-use machines, please update it to something more current. (Old hardware can run very nice versions of Linux, which cost nothing.) And if you're one of those stick-in-the-muds still running Windows 7, you have eight months to update those machines to Windows 10. (Here's how to update to Windows 10 for free.) 

Image credit: Ronnybas Frimages/Shutterstock

Windows 10 Basics

Latest in Windows Laptops
Error when installing Google Chrome on the Asus Vivobook 16 Flip, on a white desk against a blue background.
"This app can't run on your PC": Google's Chrome Installer broke on Windows, but there's a fix
Microsoft Copilot physical key on Windows keyboards
Microsoft "fixes" Windows update bug that some users considered a feature
The HP ZBook Fury 18 G1i open against a gradient purple background.
I'm a veteran laptop tester, and the new HP ZBook Fury is so powerful I'm shocked
Asus Vivobook Pro 15 (N6506, 2025) open at an angle on a white table.
Asus Vivobook Pro 15 (N6506, 2025) review: Asus dials in its MacBook Pro competitor
Windows Logo
Windows users call Microsoft's latest update blunder "The greatest bug in living memory" — here's why
A keyboard with a button that says "SCAM?"
A years-long scam that began with fake Windows pop-ups ends with PayPal payments
Latest in News
A close-up of a light-colored computer keyboard shows the keys T, Y, G, and H replaced by the logos of OpenAI, DeepSeek, Grok, and Gemini, the leading competitors in the artificial intelligence market. This serves as a visual metaphor for the intense rivalry and innovation in the AI industry. (Photo by Matteo Della Torre/NurPhoto via Getty Images)
Is generative AI inadvertently reducing the voices of many to the banality of one?
WWDC 2025 could mark the beginning of the end for certain iPhone users
Error when installing Google Chrome on the Asus Vivobook 16 Flip, on a white desk against a blue background.
"This app can't run on your PC": Google's Chrome Installer broke on Windows, but there's a fix
Nintendo Switch 2 handheld gaming console
Nintendo Switch 2 preorder date: It might be a lot closer than you think, say tipsters
Microsoft Surface Laptop (7th Edition, 2024)
Windows-on-Arm woes: Amazon warns customers about Surface laptop returns
Apple Watch Series 8
Siri is the biggest obstacle to making the Apple Watch an AI hit